Description du projet
Révolutionner la sécurité à l’ère de la virtualisation
Les technologies de l’informatique en nuage et les applications virtualisées modifient les paradigmes traditionnels de la sécurité, posant ainsi des défis sans précédent. Une expertise insuffisante, résultant de l’adoption d’architectures de microservices, et la vulnérabilité des dispositifs de sécurité virtualisés ont compromis l’efficacité de la détection et de l’investigation des menaces. Le projet ASTRID, financé par l’UE, entend relever ces défis et propose un changement de paradigme, en transférant la responsabilité de la sécurité, de la protection de la vie privée et de la fiabilité des développeurs aux fournisseurs de services. ASTRID vise à créer un environnement virtualisé plus sûr en s’appuyant sur des modèles contextuels descriptifs et une logique d’orchestration avancée. Cette approche lui permet d’améliorer la connaissance de la situation, en proposant un accès unifié, une gestion du cryptage et une corrélation des événements à travers divers services et applications. Le projet soutient l’interception légale et les enquêtes médico-légales. ASTRID est considéré comme un facteur de changement dans la sécurisation des services virtualisés de demain.
Objectif
The growing adoption of cloud technologies and the trend to virtualise applications are inexorably re-shaping the traditional security paradigms, due to the increasing usage of infrastructures outside of the enterprise perimeter and shared with other users. The need for more agility in software development and maintenance has also fostered the transition to micro-services architectures, and the wide adoption of this paradigm has led service developers to protect their applications by including virtualised instances of security appliances in their design. Unfortunately, this often results in security being managed by people without enough skills or specific expertise, it may not be able to cope with threats coming from the virtualization layer itself (e.g. hypervisor bugs), and also exposes security appliances to the same threats as the other application components. It also complicates legal interception and investigation when some applications or services are suspected of illegal activity.
To overcome the above limitations, the ASTRID project aims at shifting the detection and analysis logic outside of the service graph, by leveraging descriptive context models and their usage in ever smarter orchestration logic, hence shifting the responsibility for security, privacy, and trustworthiness from developers or end users to service providers. This approach brings new opportunities for situational awareness in the growing domain of virtualised services: unified access and encryption management, correlation of events and information among different services/applications, support for legal interception and forensics investigation.
ASTRID will develop a common approach easily portable to different virtualisation scenarios. In this respect, the technology developed by the Project will be validated in two relevant domains, i.e. plain cloud applications and Network Function Virtualisation, which typically exploits rather different chaining and orchestration models.
Champ scientifique
- natural sciencescomputer and information sciencesdata sciencebig data
- natural sciencescomputer and information sciencessoftwaresoftware development
- medical and health sciencesother medical sciencesforensic sciences
- natural sciencescomputer and information sciencesartificial intelligencemachine learning
- natural sciencescomputer and information sciencescomputer security
Programme(s)
Thème(s)
Régime de financement
RIA - Research and Innovation actionCoordinateur
00118 Roma
Italie